News for hackers. Stuff that matters.

A comment on Major sites including New York Times and BBC hit by 'ransomware' malvertising.

Re:Major sites including New York Times and BBC hit by 'rans... by bphogan on Wednesday March 16, 2016 @12:47PM (#11298701)
I was wondering how long this would take.

One of the things I've long known as a programmer for the web is that when you let a third party put content on your web site, you don't have control over what they do.

Whether it's a person entering content and you fail to sanitize it, or pulling in ads from an external network, the end result is that you get something like this eventually.

I don't have a solution, really, because nobody wants to pay for content, so sites have to use ad networks. But I'm surprised this hasn't happened much sooner.

[ Parent | on HN ]
Re:Major sites including New York Times and BBC hit by 'rans... by emodendroket on Wednesday March 16, 2016 @01:13PM (#11298939)
What are you talking about? This is far from the first time malicious software has been delivered through advertising.
[ Parent | on HN ]
Re:Major sites including New York Times and BBC hit by 'rans... by bphogan on Wednesday March 16, 2016 @04:22PM (#11300382)
Ransomeware on the NFL or NYT website has been done before?
[ Parent | on HN ]
Re:Major sites including New York Times and BBC hit by 'rans... by emodendroket on Thursday March 17, 2016 @09:30AM (#11304176)
Ransomware specifically, no. But malicious software on major, reputable Web sites? Yes.
[ Parent | on HN ]